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This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1. (previously presented) A process for executing a downloadable service with specific access rights 
to at least one profile file in a user's computer, said computer comprising a web browser 
communication to an internet or intranet via a first communication port and socket, said process 
comprising: 

arranging a confined run time environment which is assigned a second communication port 
and socket and provided with restricted access to at least one profile file that is located on the user's 
computer; 

downloading said service through said second communication port so that it is received by 
said confined run time environment; and 

executing said service within said confined run time environment whereby said service is 
given restricted access to said at least one profile file. 

2. (original) The process according to claim 1 wherein said confined run time environment is an 
extended sandbox having restrictive access to said at least one profile file. 

3. (previously presented) The process according to claim 2 wherein the service is downloaded under 
the form of a set of java code containing classes structure packaged within a signed archive file; the 
service comprising remote Internet data, a list of requested data that are needed to personalise the 
service, and code to sort remote internet data using request accessible data. 

4. -11. (canceled) 

12. (previously presented) The process according to claim 1 wherein said downloadable service is an 
authentication service cooperating with a master card. 



13. -15 (canceled) 
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16. (previously presented) A process for executing a downloadable service with specific access rights 
to at least one profile file in a user's computer, said computer comprising a web browser 
communication to the internet or intranet via a first communication port and socket, said process 
comprising: 

arranging a confined run time environment in said user's computer, said confined run time 
environment being assigned a second communication port and socket and provided with restricted 
access to at least one profile file that is located on the user's computer; 

downloading said service through said second communication port so that it is received by 
said confined run time environment; and 

executing said service within said confined run time environment whereby said service is 
given restricted access to said at least one profile file. 



